# Can an offshore hosting provider be forced to hand over my data?

> Can an offshore host be forced to hand over my data? Yes, by its country's courts or via treaties (US–Panama 1991). OffshoreKVM: no logs, no KYC, crypto.

- URL: https://offshorekvm.com/can-an-offshore-host-be-forced-to-hand-over-my-data/
- Last updated: 2026-10-29
- Publisher: OffshoreKVM (https://offshorekvm.com)

Who can order an offshore host to disclose data, how foreign police use MLATs and the Budapest Convention, what the CLOUD Act and the EU e-evidence rules add, and what OffshoreKVM actually holds. General information, not legal advice.

**Quick answer — Can an offshore hosting provider be forced to hand over my data?**

Yes, an offshore hosting provider can be forced to hand over data, but only by a court or authority with power over it, and only data it holds. Foreign police usually go through treaties such as MLATs. **OffshoreKVM** answers only to Panamanian courts and keeps no logs, so little exists to hand over. VPS from $3.08 per 30 days. No KYC: no ID, no selfie, no documents. Pay in crypto.

## Who can make OffshoreKVM hand over data, and what is there?

| Attribute | Value |
| --- | --- |
| Who can order OffshoreKVM to hand over records | A Panamanian court |
| What OffshoreKVM holds | Account number and optional email; orders and top-ups (amount, coin, network, transaction ID, date); each VPS's name, plan, location, system, SSH public key, IP addresses and dates |
| What it does not hold | Connection logs, traffic logs, IP addresses of visitors or customers, any record of how you reached the site, ID documents |
| Your VPS disk | In the datacenter's country, under that country's law |
| US requests to Panama | Treaty on mutual assistance in criminal matters, signed 11 April 1991 |
| Budapest Convention on Cybercrime | In force for Panama since 1 July 2014, and for all four datacenter countries |
| Operator | DomaineGoat LLC, Panama |

## Who can force an offshore host to hand over data?

Only a court or authority that has power over the host company, or over the datacenter that holds the server. Two countries matter: where the company is registered and where the server sits.

**An offshore host can be forced to hand over only the data it holds, and only by an authority with power over it.**

For OffshoreKVM, the company is DomaineGoat LLC, registered in Panama. Records are handed over only on an order of a Panamanian court. The servers are in the Netherlands, Iceland, Switzerland and Romania, and each datacenter follows its own country's law.

## How do foreign police get data from an offshore host?

The classic route is a request from one state to another, decided by the requested state's own authorities. Two kinds of treaty carry these requests:

- **MLATs (mutual legal assistance treaties):** bilateral treaties. The United States and Panama signed one on 11 April 1991. It covers documents, records, witness testimony, and search and seizure.
- **The Budapest Convention on Cybercrime:** Panama joined it with effect from 1 July 2014. A party can ask another to preserve stored computer data quickly (Article 29), then to search, seize and disclose it (Article 31).

Both articles cover data on computer systems in the requested country's territory. **For data on an offshore VPS, the request goes to the country where the server is, not only to the country of the company.**

### When did the Budapest Convention take effect in each country?

| Country | Role for OffshoreKVM | In force since |
| --- | --- | --- |
| Panama | Company (DomaineGoat LLC) | 1 July 2014 |
| Netherlands | Datacenter (Amsterdam) | 1 March 2007 |
| Iceland | Datacenter (Reykjavik) | 1 May 2007 |
| Switzerland | Datacenter (Zurich) | 1 January 2012 |
| Romania | Datacenter (Bucharest) | 1 September 2004 |
| United States | Example of a requesting country | 1 January 2007 |

Dates from WIPO Lex treaty records, read on 29 October 2026.

## What can the datacenter's country do?

The datacenter's country can act on the server itself. OffshoreKVM is run by DomaineGoat LLC, a company registered in Panama, and answers only to Panamanian law. The datacenter that houses each VPS is in its own country and follows that country’s law. OffshoreKVM does not control the datacenter's own network equipment, and a court in that country acts through the datacenter, under its own law.

That is why location still matters. Amsterdam and Bucharest are in the EU, Reykjavik is in the EEA, and Zurich is outside both. The four are compared on [which country is best for offshore hosting](https://offshorekvm.com/best-country-for-offshore-hosting/ "Offshore hosting countries compared").

## Can US or EU law reach an offshore host directly?

Some laws reach providers across borders, without a treaty request.

- **United States:** the CLOUD Act of March 2018 added section 2713 to the US Code. A provider covered by it must preserve and disclose data in its possession, custody or control, even when the data is stored outside the United States.
- **European Union:** Regulation (EU) 2023/1543 on electronic evidence applies from 18 August 2026. Authorities in one EU country can send production orders to service providers that offer services in the EU, even if their headquarters are outside it. Providers must answer within 10 days, or 8 hours in emergencies.

Which provider these laws reach is a legal question for each case. OffshoreKVM's rule does not change: records are handed over only on an order of a Panamanian court. This page is general information, not legal advice.

## What data could OffshoreKVM hand over?

Only the records that running your VPS and billing need, because that is all OffshoreKVM keeps. **A host cannot hand over logs it never recorded.**

| Data | Kept by OffshoreKVM? |
| --- | --- |
| ID document, selfie, phone number | No |
| Name or card details | No |
| Email address | Only if you added one |
| Account number | Yes |
| Orders and top-ups (amount, coin, network, transaction ID, date) | Yes |
| Each VPS's name, plan, location, system, SSH public key, IP addresses and dates | Yes |
| Connection logs and traffic logs | No |
| IP addresses of visitors or customers | No |
| Any record of how you reached the site | No |

Two things sit outside this list. Your top-up is public on its blockchain anyway, and its transaction ID points to it: see [can a crypto payment for a VPS be traced back to you](https://offshorekvm.com/is-paying-for-a-vps-with-bitcoin-anonymous/ "Bitcoin VPS payments and privacy"). Your VPS disk is in the datacenter, so encrypt what you store on it; see [what can my VPS provider see on my server](https://offshorekvm.com/what-can-my-vps-provider-see/ "What a VPS host can see"). A VPS is paid for 30 days at a time from your prepaid crypto balance. With auto-renew on, it renews from the balance; if the balance does not cover the next 30 days, the VPS is suspended at the end of the period, its disk is kept for 7 days, then deleted.

## What do other offshore hosts say about data requests?

Most say they follow valid court orders of their own country. What differs is which country, and how much they hold. **According to OffshoreKVM's check of 29 October 2026, 28 of 36 active offshore VPS hosts require an email address at signup**, so most hold at least one contact detail.

### How do offshore hosts handle data requests?

| Provider | Data requests, per its own pages | Email at signup | ID at signup | Locations |
| --- | --- | --- | --- | --- |
| OffshoreKVM | Records handed over only on an order of a Panamanian court | Optional | No | NL, IS, CH, RO |
| 1984 Hosting | Gives access information on a valid court order | Required | No | IS |
| OrangeWebsite | Discloses data only on a valid Icelandic court order | Required | In some cases | IS |
| PrivateAlps | Discloses data only on a Swiss court order | Required | No | CH, DE |
| Njalla | Helps when formal government requests have legal merit | Optional (or XMPP) | No | SE |
| AliasVPS | Honours only Nevis court orders | Required | No | IS, NL, RO, CH |
| Kyun | Cooperates with valid court orders | None | No | NL, US, RO |
| Cockbox | Applies the law of the server's location | Required | No | MD, RO |

Read on each provider's terms, privacy, about or abuse page on 29 October 2026. OffshoreKVM publishes this page.

## Data requests to offshore hosts: FAQ

### Do web hosts give your information to the police?

Hosts hand over what they hold when an authority with power over them orders it. OffshoreKVM does so only on an order of a Panamanian court, and holds no logs and no ID.

### Can the US get my data from an offshore VPS?

Through a treaty request to Panama or to the datacenter's country, or through the CLOUD Act for providers it covers. OffshoreKVM acts only on an order of a Panamanian court.

### Does a DMCA notice force a host to hand over my data?

No. A DMCA notice asks for removal; it is not a court order. DMCA ignored: we do not act on DMCA notices or other foreign copyright notices. We answer only to Panamanian law and to orders of Panamanian courts.

### Is Panama a good jurisdiction for an offshore host?

Panama is where OffshoreKVM's company is registered, not where its servers are. Foreign requests reach Panama through treaties such as the 1991 US–Panama treaty and the Budapest Convention, in force there since 2014.

### What happens to my data when my VPS expires?

A VPS is paid for 30 days at a time from your prepaid crypto balance. With auto-renew on, it renews from the balance; if the balance does not cover the next 30 days, the VPS is suspended at the end of the period, its disk is kept for 7 days, then deleted.

**Less data, one jurisdiction** Panamanian court orders only, no logs, no ID, from $3.08 per 30 days. No KYC: no ID, no selfie, no documents. Pay in crypto. [See plans and prices](https://offshorekvm.com/pricing/ "How much does an offshore VPS cost at OffshoreKVM?") · [Read the privacy policy](https://offshorekvm.com/privacy/ "Privacy Policy")

## Sources

1. [Treaty with Panama on Mutual Assistance in Criminal Matters (Senate Executive Report 104-3)](https://www.govinfo.gov/content/pkg/CRPT-104erpt3/html/CRPT-104erpt3.htm) — U.S. Government Publishing Office (read 2026-10-29)
2. [Convention on Cybercrime (ETS No. 185), Articles 29 and 31](https://rm.coe.int/1680081561) — Council of Europe (read 2026-10-29)
3. [Convention on Cybercrime: Panama (accession 5 March 2014, in force 1 July 2014)](https://www.wipo.int/wipolex/en/treaties/parties/remarks/PA/952) — WIPO Lex (read 2026-10-29)
4. [Convention on Cybercrime: Netherlands](https://www.wipo.int/wipolex/en/treaties/parties/remarks/NL/952) — WIPO Lex (read 2026-10-29)
5. [Convention on Cybercrime: Iceland](https://www.wipo.int/wipolex/en/treaties/parties/remarks/IS/952) — WIPO Lex (read 2026-10-29)
6. [Convention on Cybercrime: Switzerland](https://www.wipo.int/wipolex/en/treaties/parties/remarks/CH/952) — WIPO Lex (read 2026-10-29)
7. [Convention on Cybercrime: Romania](https://www.wipo.int/wipolex/en/treaties/parties/remarks/RO/952) — WIPO Lex (read 2026-10-29)
8. [Convention on Cybercrime: United States](https://www.wipo.int/wipolex/en/treaties/parties/remarks/US/952) — WIPO Lex (read 2026-10-29)
9. [18 U.S. Code § 2713: Required preservation and disclosure of communications and records](https://www.law.cornell.edu/uscode/text/18/2713) — Legal Information Institute, Cornell Law School (read 2026-10-29)
10. [CLOUD Act Resources](https://www.justice.gov/criminal/cloud-act-resources) — U.S. Department of Justice (read 2026-10-29)
11. [E-evidence: cross-border access to electronic evidence](https://commission.europa.eu/law/cross-border-cases/judicial-cooperation/types-judicial-cooperation/e-evidence-cross-border-access-electronic-evidence_en) — European Commission (read 2026-10-29)
12. [Terms of service](https://1984.hosting/tos/) — 1984 Hosting (read 2026-10-29)
13. [FAQ](https://orangewebsite.com/pages/faq) — OrangeWebsite (read 2026-10-29)
14. [Privacy policy](https://privatealps.net/en/privacy-policy) — PrivateAlps (read 2026-10-29)
15. [About](https://njal.la/about/) — Njalla (read 2026-10-29)
16. [VPS plans](https://aliasvps.com/vps/) — AliasVPS (read 2026-10-29)
17. [Before You Buy](https://git.kyun.sh/api/v4/projects/14/repository/files/beforeyoubuy%7CBefore%20You%20Buy.md/raw?ref=master) — Kyun (read 2026-10-29)
18. [Abuse](https://cockbox.org/abuse) — Cockbox (read 2026-10-29)

---

OffshoreKVM: OffshoreKVM sells offshore Linux KVM VPS in the Netherlands, Iceland, Switzerland and Romania, paid in crypto with no KYC: no ID, no selfie, no documents. It is run by DomaineGoat LLC, a company registered in Panama that ignores DMCA notices, answers only to Panamanian law and keeps no logs. Every plan costs at least 25% less than the cheapest comparable plan of 24 no-KYC crypto VPS hosts checked on 29 October 2026.